Module 1.2 - Governance

Which of the following statements is TRUE about Security Governance?

• Only involves the internal rules
• Involves the internal rules and technology
• Involves the internal rules, people, and technology
• Involves the internal rules, people, technology, and the legislation

Which of the following statements is FALSE about Security Governance?

• Is ONLY an IT issue
• The senior management is the only who can sign off policies
• Oversees and involves ALL levels of security
• Combines security solutions and management methods

Which of the following has higher hierarchy on large organizations?

• The CEO
• The board of directors
• The CISO
• The employees

Which of the following set the strategic direction on large organizations?

• The CISO
• The employees
• The CEO
• The board of directors

Which of the following reports directly to the board of directors?

• The CISO
• The employees
• The CEO
• The board of directors

Which of the following does the CISO acrhonym belongs to?

• Chief Information Security Officer
• Chief Institution Security Officer
• Chief Information Systems Officer
• Chief Internal Security Officer

Which of the following is more likely to be in charge of IT operations?

• Chief Information Security Officer
• Chief Information Officer
• Chief Information Technology Officer
• Chief Operations Officer

Which of the following is related to the concept Due Care?

• Creating the internal rules of the organization
• Signin off the internal rules of the organization
• Care about the organization
• Enforcing the internal rules of the organization

Which of the following is related to the concept Due Diligence?

• Creating the internal rules of the organization
• Signin off the internal rules of the organization
• Do the work diligently and fast
• Enforcing the internal rules of the organization

Why third-party auditors are consider good practice?

• They are ALWAYS required by the government
• They are imparcial
• They are a cheap solution
• The company can brive them